—

DRUPAL-CORE-2020-009

Quick fix

DRUPAL-CORE-2020-009 — drupal/core: upgrade to the fixed version with the command below.

composer require drupal/core:^8.8.10

Details

Drupal 8 and 9 have a reflected cross-site scripting (XSS) vulnerability under certain circumstances.

An attacker could leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability.

Enter the version of the package you're using.

Introduced in: 8.0.0Fixed in: 8.8.10

Fixcomposer require drupal/core:^8.8.10